CVE-2021-3718

A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhanced Biometrics setting is enabled in BIOS...

CVE-2021-3843

A potential vulnerability in the SMI function to access EEPROM in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code...

Code injection

A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad systems could be used to leak out data out of the SMRAM range...

Code injection

A potential vulnerability in the SMI function to access EEPROM in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code...

Code injection

A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code...

CVE-2021-3843

CVE-2021-3843 concerns Lenovo ThinkPad BIOS/CSME: a vulnerability in the SMI (System Management Interrupt) callback function that handles EEPROM access. The issue is described as an input validation error in the SMI callback used in the CSME configuration, which can allow a local attacker with el...

CVE-2021-3843

A potential vulnerability in the SMI function to access EEPROM in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code...

CVE-2021-3786

CVE-2021-3786 concerns Lenovo notebook/ThinkPad systems with a vulnerable SMI callback in the CSME configuration. The issue is a potential flaw in the SMI callback function that could allow leaking data from the SMRAM range. Public records describe this as a data leakage risk affecting confidenti...

CVE-2021-3718

CVE-2021-3718 describes a denial-of-service issue in some ThinkPad systems where enabling the Enhanced Biometrics BIOS setting can cause the machine to crash. Public details indicate the impact is availability (system crash) with a physical attack vector and no user interaction required per NVD m...

CVE-2021-3718

A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhanced Biometrics setting is enabled in BIOS...

CVE-2021-3599

A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code...

CVE-2021-3599

Technical details (affected product/version, root cause, and remediation) are not publicly available in the provided documents for CVE-2021-3599. Monitor for updates.

Lenovo ThinkPad 输入验证错误漏洞

Lenovo ThinkPad is a portable computer from the Chinese company Lenovo. The ThinkPad suffers from an input validation error vulnerability that can be exploited by an attacker to execute arbitrary code...

Lenovo ThinkPad 安全漏洞

Lenovo ThinkPad is a portable computer from Lenovo, a Chinese company. The ThinkPad suffers from a security vulnerability that stems from the fact that when the Enhanced Biometrics setting is enabled in the BIOS, the vulnerability could cause the system to crash...

CVE-2021-3718: Improper Handling of Undefined Values

A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhanced Biometrics setting is enabled in BIOS...

Lenovo ThinkPad 输入验证错误漏洞

Lenovo ThinkPad is a portable computer from Lenovo, a Chinese company. An input validation error vulnerability exists in the SMI callback function used in the CSME configuration of the Lenovo ThinkPad, which can be exploited by an attacker to execute arbitrary code...

CVE-2021-3843: Improper Input Validation

A potential vulnerability in the SMI function to access EEPROM in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code...

CVE-2021-3786: Improper Input Validation

A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad systems could be used to leak out data out of the SMRAM range...

CVE-2021-3599: Improper Input Validation

A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code...

Lenovo ThinkPad 输入验证错误漏洞

Lenovo ThinkPad is a portable computer from Lenovo China. An input validation error vulnerability exists in the SMI callback function used in the CSME configuration of some Lenovo laptops and ThinkPad systems, which can be exploited by an attacker to obtain data outside the scope of SMRAM...